Page MenuHomePhabricator

HSTS preload for wmfusercontent.org
Closed, ResolvedPublic

Description

phab.wmfusercontent.org + wmfusercontent.org are both set up to 301->https and send preload-enabled HSTS headers. However, https://wmfusercontent.org still returns a 404 (as it's not configured properly on cache_misc), and the HSTS appspot checker doesn't like 4xx/5xx. If I just added it as a domain pointing at the phabricator applayer, it would 5xx, so that's no better (and not really correct anyways).

Perhaps we can synth a 200 OK for this with a short text/plain output, just to satisfy preload requirements?

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change 284112 had a related patch set uploaded (by BBlack):
varnish redir: wmfusercontent.org -> www.wikimedia.org

https://gerrit.wikimedia.org/r/284112

Change 284112 merged by BBlack:
varnish redir: wmfusercontent.org -> www.wikimedia.org

https://gerrit.wikimedia.org/r/284112

BBlack claimed this task.

The redirect above worked, this is submitted to the preload list now (will take the usual lag time to make it into browsers)